Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi

Page de 408
 
4-14
AsyncOS 8.3.5 for Cisco Content Security Management User Guide
 
Chapter 4      Using Centralized Email Security Reporting
  Understanding the Email Reporting Pages
Incoming Mail Page
The Email > Reporting > Incoming Mail page on the Security Management appliance provides 
interactive reporting on the real-time information for all remote hosts connecting to your managed 
Security Management appliances. You can gather information about the IP addresses, domains, and 
network owners (organizations) sending mail to your system. You can also perform a Sender Profile 
search on IP addresses, domains, or organizations that have sent mail to you.
The Incoming Mail page consists of two main sections: the mail trend graphs summarizing the top 
senders (by total threat messages and by total clean messages) and the Incoming Mail Details interactive 
table.
The Incoming Mail Details interactive table displays detailed information about the particular IP 
address, domain, or network owner (organization). You can access a Sender Profile page for any IP 
address, domain, or network owner by clicking the corresponding link at the top of the Incoming Mail 
page, or on other Sender Profile pages. 
From the Incoming Mail pages you can: 
Perform a search on IP addresses, domains, or network owners (organizations) that have sent mail 
to your Security Management appliances. See 
View the Sender Groups report to monitor connections according to the specific sender group and 
mail flow policy actions. See the 
 for more 
information.
See detailed statistics on senders that have sent mail to your appliances. The statistics include the 
number of attempted messages broken down by security service (sender reputation filtering, 
anti-spam, anti-virus, and so forth). 
Sort by senders who have sent you a high volume of spam or virus email, as determined by anti-spam 
or anti-virus security services.
Use the SenderBase Reputation Service to examine the relationship between specific IP addresses, 
domains, and organizations to obtain information about a sender. 
Obtain more information about a sender from the SenderBase Reputation Service, including a 
sender’s SenderBase Reputation Score (SBRS) and which sender group the domain matched most 
recently. Add senders to sender groups.
Obtain more information about a specific sender who has sent a high volume of spam or virus email, 
as determined by the anti-spam or anti-virus security services.
Views Within the Incoming Mail Page
The Incoming Mail page has three different views: 
IP Addresses
Domains
Network Owners 
These views provide a snapshot of the remote hosts connecting to the system in the context of the 
selected view.
Additionally, in the Incoming Mail Details section of the Incoming Mail Page, you can click on a 
Sender’s IP Address, Domain name, or Network Owner Information to retrieve specific Sender Profile 
Information. For more information on Sender Profile information, see the 
.